rwx.work/rtfd
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

nginx/configure/unindent

Browse source
This commit is contained in:
Marc Beninca 2019-08-04 17:23:42 +02:00
parent 133c62577a
commit 9677f99790
1 changed files with 51 additions and 52 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

103
in/public/web/nginx/configure.rst
View file

@ -6,72 +6,71 @@ Configure
.. code:: .. code::
pid /run/nginx.pid; pid /run/nginx.pid;
user user; user user;
worker_processes auto; worker_processes auto;
events { events {
multi_accept off; multi_accept off;
worker_connections 512; worker_connections 512;
} }
http { http {
# General # General
keepalive_timeout 60; keepalive_timeout 60;
sendfile on; sendfile on;
server_tokens off; server_tokens off;
tcp_nopush on; tcp_nopush on;
tcp_nodelay on; tcp_nodelay on;
types_hash_max_size 2048; types_hash_max_size 2048;
# Names # Names
server_name_in_redirect off; server_name_in_redirect off;
server_names_hash_bucket_size 128; server_names_hash_bucket_size 128;
# File types # File types
include /etc/nginx/mime.types; include /etc/nginx/mime.types;
default_type application/octet-stream; default_type application/octet-stream;
# Security # Security
ssl_buffer_size 8k; ssl_buffer_size 8k;
ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-SHA384,ECDHE-ECDSA-AES256-SHA384,ECDHE-RSA-AES256-SHA,ECDHE-ECDSA-AES256-SHA,DHE-DSS-AES256-GCM-SHA384,DHE-RSA-AES256-GCM-SHA384,DHE-RSA-AES256-SHA256,DHE-DSS-AES256-SHA256,DHE-RSA-AES256-SHA,DHE-DSS-AES256-SHA"; ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384,ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-SHA384,ECDHE-ECDSA-AES256-SHA384,ECDHE-RSA-AES256-SHA,ECDHE-ECDSA-AES256-SHA,DHE-DSS-AES256-GCM-SHA384,DHE-RSA-AES256-GCM-SHA384,DHE-RSA-AES256-SHA256,DHE-DSS-AES256-SHA256,DHE-RSA-AES256-SHA,DHE-DSS-AES256-SHA";
ssl_dhparam /etc/nginx/dhparam; ssl_dhparam /etc/nginx/dhparam;
ssl_ecdh_curve secp384r1; ssl_ecdh_curve secp384r1;
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.2; ssl_protocols TLSv1.2;
ssl_session_cache shared:ssl_session_cache:16m; ssl_session_cache shared:ssl_session_cache:16m;
ssl_session_timeout 15m; ssl_session_timeout 15m;
# Log # Log
access_log /var/log/nginx/access.log; access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log; error_log /var/log/nginx/error.log;
# Compression # Compression
gzip on; gzip on;
gzip_buffers 32 8k; gzip_buffers 32 8k;
gzip_comp_level 5; gzip_comp_level 5;
gzip_http_version 1.1; gzip_http_version 1.1;
gzip_proxied any; gzip_proxied any;
gzip_types *; gzip_types *;
gzip_vary off; gzip_vary off;
# Misc # Misc
add_header Strict-Transport-Security max-age=31557600; add_header Strict-Transport-Security max-age=31557600;
client_max_body_size 16m; client_max_body_size 16m;
index index.html; index index.html;
proxy_pass_request_body on; proxy_pass_request_body on;
proxy_pass_request_headers on; proxy_pass_request_headers on;
proxy_redirect off; proxy_redirect off;
# Includes # Includes
include /etc/nginx/sites-enabled/*;
}
include /etc/nginx/sites-enabled/*;
}